We’re deploying Samsung XCover 6Pro/7 devices with global SIMs, but they keep defaulting to “National Roaming Only“, blocking data abroad. This effectively kills data connectivity for our field teams as soon as they cross a border until someone manually goes into settings and changes it. We’ve pushed the APNs via Hexnode, but the roaming scope remains restricted, and users can’t change it manually.
Is there a way to remotely force the roaming scope to “All Networks“?
16 Views
Hey @skylar-a , this is a common hurdle with global SIM deployments. Standard MDM protocols often don’t have a “one-click” toggle for roaming scope because it is considered a carrier-privileged setting. However, since you are using Samsung devices, you can solve this using OEMConfig (Knox Service Plugin). Here’s a breakdown of the steps to fix it:
Check APN Protocol: Ensure your Hexnode APN policy is set to IPv4/IPv6. IPv4-only can sometimes trigger “National Roaming” restrictions.
Use KSP: Configure the Knox Service Plugin policy in Hexnode. In the App Configuration, locate the Roaming Scope setting and set it to “All Networks“.
KPE License: This feature requires a Knox Platform for Enterprise (KPE) Premium key. You can generate this for free from the Samsung Knox Admin Portal and paste it into the license field in your KSP configuration.
Thanks! Where do I get that KPE key, and where does it go in the Hexnode policy?
No problem! Here is the quick path:
Get the Key: Log into the Samsung Knox Admin Portal, go to License Keys > Generate License Key, and select Knox Platform for Enterprise (KPE).
Apply in Hexnode UEM: In the Hexnode UEM portal, under the Knox Service Plug-in (KSP) policy, paste that alphanumeric string into the Knox License Key field.
Set Scope: Within the same KSP config, find Device Connectivity and switch Roaming Scope to All Networks (International Roaming).
Test this on one device first, the modem usually takes about a minute to update once the policy hits.
Don't have an account? Sign up
